1# looks a bit strange but is valid now 2# block return-icmp6 in inet proto icmp all 3block in return-icmp6 in inet proto icmp all